Security fixes.  Fixing SQL injection on API, better SQLi protection on logins, forcing admin logins on admin pages, etc